Cyber Network Defense Analyst (CNDA) – Cloud Forensics

Argo Cyber Systems

Arlington, VA

Hybrid · Senior · Full-time · $130,000 - $160,000 a year

The Role

This position involves leading end-to-end forensic investigations across hybrid and multi-cloud environments, including Azure, AWS, and GCP. Analysts correlate telemetry, reconstruct attacker timelines, develop detection logic and hunting scripts, and produce technical and executive-level reports to support federal cyber defence operations.

Skills & Experience

Candidates must hold an active TS/SCI clearance with DHS EOD eligibility. Deep expertise in cloud forensics across Azure AD/Entra ID, M365, AWS, and GCP is essential, alongside hands-on experience with Microsoft Sentinel, Defender, AWS GuardDuty, GCP Chronicle, and cloud telemetry sources such as CloudTrail and VPC Flow Logs.

Who It Suits

This role suits a seasoned cyber analyst who thrives in high-stakes federal environments and has strong experience investigating identity-based intrusions and cloud control-plane compromises. Those comfortable working across both on-premises and multi-cloud architectures, and capable of communicating findings to both technical and executive audiences, will excel here.

Typical advertised salary for Digital Forensics roles in United States: $90,000–$154,000 (median $120,000 — from 170 recent listings analysed by Forensic Focus).

Learn More/Apply

Applications are handled entirely by the employer or the original listing site. Forensic Focus aggregates and summarises public listings; details can change after publication — always confirm on the employer's page.